Strange path of csrss.exe

[Guest Wahid Iqbal]

csrss.exe file that is a microsoft Client server runtime process subsystem process ( runs from Windows\system32) folder.

 

 

(Ref: Is csrss.exe safe? How to remove a csrss error?)

 

 

 

our monitoring application has detected the same process is running normally(Operatin system Windows 2012), but its file path is being shown in chinese language which is suspecious.

 

 

i have run a full system Mcafee scan + running Mcafee TIE exe reputation analysis which is in progress.

 

 

ANy help to detect any unusuall process execution or malware suspect would be helpfull.

 

Continue reading...